Loading organizations...

§ Private Profile · 799 Market St FL 5 San Francisco, California 94103, USA
Semgrep, formerly known as r2c, is a code scanning platform for finding first and third-party security vulnerabilities in your code base.
Semgrep has raised $193.0M across 4 funding rounds.
Key people at Semgrep.
Semgrep was founded in 2017 by Isaac Evans (Founder) and Luke O'malley (Founder) and Drew Dennison (Founder).
Semgrep has raised $193.0M in total across 4 funding rounds.
Semgrep is a leading application security platform that provides AI-assisted static application security testing (SAST), software composition analysis (SCA), and secrets detection to help developers secure their code.
Semgrep is a code scanning platform designed to identify both first-party and third-party security vulnerabilities within software codebases. It offers a developer-friendly static application security testing (SAST) tool that supports over 30 programming languages and integrates with CI/CD pipelines like GitHub and GitLab. Semgrep serves software development teams across various industries, enabling them to embed security checks early in the development lifecycle, thereby reducing the risk and cost of software exploits. The platform combines an open-source core with commercial offerings, powering secure code development at scale for companies such as Figma, Dropbox, Slack, and Snowflake. Its growth is fueled by continuous innovation, including weekly feature releases and recent advancements in AI-assisted application security[2][4].
Semgrep was founded in 2017 by three MIT graduates: Isaac Evans (CEO), Drew Dennison (CTO), and Luke O'Malley (CPO). Evans and Dennison were college roommates and entrepreneurs in residence at Redpoint Ventures, where they explored ways to help smaller companies secure their codebases, recognizing that many organizations lacked the resources to embed security at the code level like top tech firms. The company initially launched as r2c and faced early challenges building a rules-based security engine tailored for developers. A pivotal moment came in 2019 when Yoann Padioleau, a former Facebook engineer and original author of the open-source tool sgrep (part of Facebook’s pfff program analysis library), joined the team. His work transformed sgrep into a modern, multi-language security tool, which was later renamed Semgrep in 2020 to avoid naming conflicts. Since then, Semgrep has evolved into a leading application security platform with strong venture backing from firms like Redpoint Ventures, Sequoia Capital, and Lightspeed Venture Partners[1][2][4].
Semgrep rides the growing trend of "shift-left" security, emphasizing early detection of vulnerabilities during development rather than post-deployment. This approach aligns with increasing market demand for DevSecOps tools that integrate security seamlessly into fast-paced software delivery. The timing is critical as software complexity and supply chain risks escalate, making automated, scalable security solutions essential. Semgrep influences the broader ecosystem by democratizing access to advanced static analysis, empowering smaller teams to achieve security standards previously accessible only to large enterprises. Its open-source roots and community-driven model also foster innovation and collaboration in application security[2][4].
Looking ahead, Semgrep is poised to deepen its impact by expanding AI-driven security capabilities and broadening language and framework support. Trends such as increased regulatory scrutiny on software security and the rise of cloud-native development will likely accelerate demand for Semgrep’s solutions. The company’s continued investment in community engagement and enterprise features positions it to become a foundational tool in secure software development. As it scales, Semgrep may also influence industry standards for developer-centric security tooling, reinforcing its mission to make software exploitation prohibitively expensive from day one[2][4].
Key people at Semgrep.
Semgrep was founded in 2017 by Isaac Evans (Founder) and Luke O'malley (Founder) and Drew Dennison (Founder).
Semgrep has raised $193.0M in total across 4 funding rounds.
Semgrep's investors include Menlo Ventures, 20VC, 2.12 Angels, Bain Capital Ventures, Conviction Partners, Felicis Ventures, First Round Capital, Infinite Niches, Lightspeed Venture Partners, Matchstick Ventures, Maven Ventures, Mustard Seed.
Semgrep has raised $193.0M across 4 funding rounds. Most recently, it raised $100.0M Series D in February 2025.